SOA Security
From Wikipedia, the free encyclopedia
Service-oriented architecture (SOA) allows different ways to develop applications by combining services. The main premise of SOA is to erase application boundaries and technology differences. As applications are opened up, how we can combine these services securely becomes an issue. Traditionally, security models have been hardcoded into applications and when capabilities of an application are opened up for use by other applications, the security models built into each application may not be good enough.
Several emerging technologies and standards address different aspects of the problem of security in SOA. Standards such as WS-Security, SAML, WS-Trust and WS-SecurityPolicy address the security problem for SOA implementations that use Web Services. Technologies such as Application-oriented networking (AON) are addressing the problem of SOA security in the larger context as well.
[edit] Books on SOA Security
- Kanneganti, Ramarao; Prasad A. Chodavarapu (2007). SOA Security. Manning Publications. ISBN 1-932394-68-0.
- Rosenberg, Jothy; David Remy (2004). Securing Web Services with WS-Security: Demystifying WS-Security, WS-Policy, SAML, XML Signature, and XML Encryption. SAMS. ISBN 0672326515.
- Hartman, Bret; Donald J. Flinn, Konstantin Beznosov, Shirley Kawamoto (2003). Mastering Web Services Security. Wiley. ISBN 0471267163.
- O'Neill, Mark (2003). Web Services Security. McGraw-Hill Osborne Media. ISBN 0072224711.
